Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File:                     Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier:          q1adZiD37h1fYn2ylMGWjrd+5qxMJg2vsBgBZSDzb7s=
Subject key identifier:   07:16:58:93:C5:06:1E:33:A2:B2:2C:3D:CD:E8:1B:BC:5C:E0:19:64
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer:       /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial:       0192F03098A0C0E343EE3292269E8104610E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number:          0D36
Signing time:             Sun 03 Nov 2024 04:02:49 +0000
Manifest this update:     Sun 03 Nov 2024 04:02:49 +0000
Manifest next update:     Mon 04 Nov 2024 04:02:49 +0000
Files and hashes:         1: BhCocX_IjXgLW6fL4MUe8gUSpJU.roa (hash: kgICCPqZcCCqH0bioCsvySPWKRM6XNR5J43M3VzjqLc=)
                          2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: 477o8mHA7q4hR1sjAwiqkDbTLooJu3DeQ7tnPCRkdsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:30:98:a0:c0:e3:43:ee:32:92:26:9e:81:04:61:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
        Validity
            Not Before: Nov  3 04:02:49 2024 GMT
            Not After : Nov  4 04:02:49 2024 GMT
        Subject: CN=07165893c5061e33a2b22c3dcde81bbc5ce01964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:7c:42:af:af:f3:16:0f:5b:26:d7:bf:9c:
                    8f:e2:85:f8:61:10:b1:5e:84:1a:f4:8e:ad:e7:5b:
                    67:e9:b1:7f:ea:be:0d:f1:84:b4:26:1a:47:15:c3:
                    e1:7e:ac:ca:69:62:76:76:f0:3f:1a:a7:b0:dd:ca:
                    eb:16:c1:13:2d:31:bb:3a:dd:04:88:90:94:92:3c:
                    94:77:55:66:78:08:6f:d2:86:ab:3e:00:37:74:a3:
                    d4:cd:dc:3a:75:57:82:c3:02:7b:96:c7:97:c3:df:
                    43:22:56:1e:c0:ab:6a:48:60:96:6d:8e:c8:84:35:
                    60:f6:73:f2:94:0e:11:fd:bd:ce:c0:bd:d1:b0:8a:
                    de:c8:90:86:5a:f5:ea:bf:9c:f9:8c:1c:a7:4e:0b:
                    ce:ba:e4:54:f7:f1:36:47:80:12:18:f3:a4:34:3f:
                    b8:19:20:ea:39:fa:25:25:fb:61:06:72:ea:94:17:
                    c3:6e:2b:8f:08:0b:6e:72:6e:97:53:77:91:71:ce:
                    f7:4c:f3:11:eb:30:c4:fb:5d:06:36:69:52:0b:11:
                    f9:84:c4:85:ec:41:21:86:b3:9e:a5:7e:f3:8e:7d:
                    ed:e5:d3:d3:eb:1f:c2:06:4f:26:8a:f1:20:88:a6:
                    76:9f:04:5b:96:a1:1a:74:7a:29:78:87:44:50:65:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:16:58:93:C5:06:1E:33:A2:B2:2C:3D:CD:E8:1B:BC:5C:E0:19:64
            X509v3 Authority Key Identifier:
                keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:54:7e:9a:55:fb:34:50:e9:de:d2:0c:53:60:32:4a:61:33:
         75:db:77:85:d3:bb:88:ed:9b:a4:6f:1d:02:44:00:ee:06:e0:
         7b:fa:fc:6c:c2:38:52:3b:8a:80:86:16:19:46:6c:03:ed:c5:
         2f:56:83:d2:a4:44:82:62:84:79:b1:fb:8d:28:0e:6e:a5:29:
         69:ad:7b:dd:6c:be:d3:e6:a0:fb:0a:65:6b:01:80:ed:81:31:
         46:a8:27:61:30:8e:f7:ba:51:37:bc:d5:fd:95:50:05:20:ca:
         30:8c:4f:25:32:d2:e0:fe:5e:6d:be:2e:1c:1b:5f:51:7b:65:
         31:10:28:8e:63:e6:03:84:7b:5d:b2:eb:42:1d:c0:6e:38:6b:
         41:ab:71:48:03:ce:d6:2d:71:c8:ef:74:0a:5e:9b:ae:79:58:
         90:64:52:f7:5e:9d:de:76:fc:45:4e:59:02:0a:c7:bf:4e:a6:
         a1:16:2d:ba:a7:fa:f9:ef:07:80:58:ea:4f:0a:a3:45:a2:61:
         49:65:be:7b:30:72:ac:4c:ee:54:c8:7e:70:d8:4a:42:99:70:
         eb:15:d8:aa:18:65:10:36:0b:3c:a1:84:f5:62:e2:6d:55:39:
         f3:d9:51:19:48:bc:70:ca:3d:fc:d0:42:0e:f0:49:8a:9a:b9:
         28:32:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:35:44 2024 by rpki-client on console-fra.rpki-client.org